/account/reset was mistakenly requiring a 'verifier' argument

This was preventing change-password from working. The new SRP verifier
is actually encrypted inside the 'bundle' argument, not free-standing.